Please do not open a public issue for a suspected security vulnerability.

Report vulnerabilities privately through GitHub's private vulnerability reporting. Include a description, affected version or commit, reproduction steps, and any suggested mitigation. Do not include personal images or other private data.

Commons ML performs inference locally and does not provide a network transport or upload service. Reports involving bundled models, native libraries, or dependency supply-chain risks are especially useful.